#agents

Prompt injection is the SQL injection of the AI era, except worse. SQLi has a clean fix. Indirect prompt injection doesn't, because an LLM reads instructions and untrusted data through the same channel with no reliable way to tell them apart. OWASP ranks it the number one risk in AI applications, and the numbers back that up.

MCP is the fix for the N×M integration mess: instead of every AI app writing a custom connector for every tool, everyone speaks one protocol. Here is what a host, client, and server actually are, the three primitives, and where it breaks.